Hi guys, In a structure with super, worker and collector, we had to
change the ip's of all components and we use a replicated structure with
workers, but we cannot see the logs we see in real-time in relative when
we search backwards. What should we ...
Hi guys, I can't give 15TB to the Worker data disc in VM, instead, if I
add 2 more discs and configure them to be 5TB each and show them as 2
hot tier, will I get what I want?
Hi guys, I changed the ip of the supervisor by entering configFSM.sh and
it changed successfully. I entered the register command to register the
collector to the new sup ip, but I get an error like this. Does anyone
know the reason?
Hi guys, Is the EPS licence calculated based on the number of events
received by the SIEM or the number of parse events? A log source
receives 500 events per second and 200 are dropped and only 300 are
processed. Will the EPS licence be 300 or 500 he...
Hi,I have installed an agent on my windows 2008 R2 machine and I am
getting the logs here but the logs are not parsed because the raw
message is split into several parts, to try to fix this I disable the
default parser but it does not test and does n...
Does anyone have previous experience with this? In the last case, I
cannot change the worker's ip, it tries to go to the old ip of the
supervisor, but I changed it in hosts and phoenix. Is there a sequence
when doing this job, which component should ...
@cdurkin_FTNT I tried this process as you said and then we expect it to
reboot itself, but the reboot does not happen. Continuing to provision
the CollectorThis collector is registered successfully. Waiting for
reboot...
hi @BenBrit I don't get an error on the clickhouse side anymore, my
current problem is that the collector stops the log flow as soon as I
change the supervisor ip. "Last Receiver" shows that moment.
I think I overcame the clickhouse test problem, but the collector is
still not collecting logs. I would appreciate comments from anyone who
has an idea about this issue.
